==============================================================
        金山清理专家系统诊断报告

该诊断报告由金山清理专家提供 http://www.duba.net 
==============================================================

诊断时间:            2008-11-23, 20:25 
诊断平台:            Windows XP [5.1.2600] Service Pack 3 
IE版本:              Internet Explorer V6.0.5512.2900 
计算机物理内存:      1270(MB) 
当前可用内存:        888(MB) 
硬盘总大小:          33(GB) 
硬盘可用空间:        17(GB) 
清理专家版本:        2008.11.18.98 
恶意软件库版本:      2008.10.10.1 
漏洞库版本:          2008.11.21.3 




==============================================================
        启动文件夹位置
==============================================================

Common Startup:      C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Startup:             C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
Common Startup:      %ALLUSERSPROFILE%\「开始」菜单\程序\启动

==============================================================
        开始菜单启动项
==============================================================

<A51TE.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\A51TE.lnk>
文件路径:  [残留信息]

<HA8ZUHZ8XQW.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\HA8ZUHZ8XQW.lnk>
文件路径:  [残留信息]

<2UIU27G92.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\2UIU27G92.lnk>
文件路径:  [残留信息]

<9HIUAYFCWIA.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\9HIUAYFCWIA.lnk>
文件路径:  [残留信息]

<6NVUAN7LTOS.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\6NVUAN7LTOS.lnk>
文件路径:  [残留信息]

<NTAM6I.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\NTAM6I.lnk>
文件路径:  [残留信息]

<TDLTKUWNA2J.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\TDLTKUWNA2J.lnk>
文件路径:  [残留信息]

<I7638HLIR0UU.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\I7638HLIR0UU.lnk>
文件路径:  [残留信息]

<97D1803788.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\97D1803788.lnk>
文件路径:  [残留信息]

<2A9I67T2UEDX.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\2A9I67T2UEDX.lnk>
文件路径:  [残留信息]

<QG3WN3DWCMCJ.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\QG3WN3DWCMCJ.lnk>
文件路径:  [残留信息]

<G9I43.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\G9I43.lnk>
文件路径:  [残留信息]

<5JY83GR.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\5JY83GR.lnk>
文件路径:  [残留信息]

<VLPCFQ4QDT.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\VLPCFQ4QDT.lnk>
文件路径:  [残留信息]

<2VTF8GF0.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\2VTF8GF0.lnk>
文件路径:  [残留信息]

<FIW6GP2WXM08.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\FIW6GP2WXM08.lnk>
文件路径:  [残留信息]

<E0EZU6Y.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\E0EZU6Y.lnk>
文件路径:  [残留信息]

<1Y9WE.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\1Y9WE.lnk>
文件路径:  [残留信息]

<F6486732P43.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\F6486732P43.lnk>
文件路径:  [残留信息]

<C3G1O7FW9QL.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\C3G1O7FW9QL.lnk>
文件路径:  [残留信息]

<JMTDO.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\JMTDO.lnk>
文件路径:  [残留信息]

<G8L2KN3PXN9.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\G8L2KN3PXN9.lnk>
文件路径:  [残留信息]

<R3BZA5V.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\R3BZA5V.lnk>
文件路径:  [残留信息]

<K7H9L7SDY.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\K7H9L7SDY.lnk>
文件路径:  [残留信息]

<EJSEG3CE.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\EJSEG3CE.lnk>
文件路径:  [残留信息]

<T0L13.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\T0L13.lnk>
文件路径:  [残留信息]

<RDUDEZ6K.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\RDUDEZ6K.lnk>
文件路径:  [残留信息]

<AZUF7W5.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\AZUF7W5.lnk>
文件路径:  [残留信息]

<Q9MLN.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Q9MLN.lnk>
文件路径:  [残留信息]

<EFSSBO0E.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\EFSSBO0E.lnk>
文件路径:  [残留信息]

<QZ8E3QS4L45B.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\QZ8E3QS4L45B.lnk>
文件路径:  [残留信息]

<MZGTD9MQ02YP.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\MZGTD9MQ02YP.lnk>
文件路径:  [残留信息]

<71JFSA63BE.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\71JFSA63BE.lnk>
文件路径:  [残留信息]

<Z66L872VUU.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Z66L872VUU.lnk>
文件路径:  [残留信息]

<6VHHN1CX.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\6VHHN1CX.lnk>
文件路径:  [残留信息]

<LBLCE7M8HFAU.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\LBLCE7M8HFAU.lnk>
文件路径:  [残留信息]

<IU9QO4K.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IU9QO4K.lnk>
文件路径:  [残留信息]

<B5YVOVUHC.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\B5YVOVUHC.lnk>
文件路径:  [残留信息]

<NDM1MCF7YV.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\NDM1MCF7YV.lnk>
文件路径:  [残留信息]

<320UWFLA.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\320UWFLA.lnk>
文件路径:  [残留信息]

<WPCUL6O4G.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\WPCUL6O4G.lnk>
文件路径:  [残留信息]

<UP823.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\UP823.lnk>
文件路径:  [残留信息]

<PIC2RSX5TQJ.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\PIC2RSX5TQJ.lnk>
文件路径:  [残留信息]

<Y5WST.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Y5WST.lnk>
文件路径:  [残留信息]

<SJXI9Q6UVD7H.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\SJXI9Q6UVD7H.lnk>
文件路径:  [残留信息]

<42YFUWK2RNA2.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\42YFUWK2RNA2.lnk>
文件路径:  [残留信息]

<LAIAX3.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\LAIAX3.lnk>
文件路径:  [残留信息]

<D4VUJBQL7BM.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\D4VUJBQL7BM.lnk>
文件路径:  [残留信息]

<X3H7LJGOK.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\X3H7LJGOK.lnk>
文件路径:  [残留信息]

<BEAU8ZK90Y.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\BEAU8ZK90Y.lnk>
文件路径:  [残留信息]

<ZT39B4IPSR9C.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\ZT39B4IPSR9C.lnk>
文件路径:  [残留信息]

<S5QR81.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\S5QR81.lnk>
文件路径:  [残留信息]

<PYXEX.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\PYXEX.lnk>
文件路径:  [残留信息]

<PXV6SDMWT.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\PXV6SDMWT.lnk>
文件路径:  [残留信息]

<3AXA664J4UO.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\3AXA664J4UO.lnk>
文件路径:  [残留信息]


==============================================================
        调试相关项
==============================================================

该项来源: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AEDebug

        [Debugger]            <drwtsn32 -p %ld -e %ld -g>


==============================================================
        Host File
==============================================================

127.0.0.1       localhost

==============================================================
        系统服务
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

        [agl] [已启用]                 <C:\WINDOWS\system32\agl.exe>
        文件路径: C:\WINDOWS\system32\agl.exe [分析中]

        [foxwei] [已启用]              <C:\WINDOWS\system32\foxwei.exe>
        文件路径: C:\WINDOWS\system32\foxwei.exe [分析中]

        [GJ5Q8CCD] [已启用]            <C:\Program Files\Windows NT\GJ5Q8CCD.EXE WJ2UQ32>

        [HidServ] [已禁用]             <%SystemRoot%\System32\hidserv.dll>

        [lasas] [已启用]               <C:\WINDOWS\system32\lasas.exe>
        文件路径: C:\WINDOWS\system32\lasas.exe [病毒程序]

        [scvst] [已启用]               <C:\WINDOWS\system32\scvst.exe>
        文件路径: C:\WINDOWS\system32\scvst.exe [分析中]

        [svch0st] [已启用]             <C:\WINDOWS\system32\svch0st.exe>
        文件路径: C:\WINDOWS\system32\svch0st.exe [分析中]

        [svost] [已启用]               <C:\WINDOWS\system32\svost.exe>
        文件路径: C:\WINDOWS\system32\svost.exe [分析中]

        [tstm] [已启用]                <C:\WINDOWS\system32\tstm.exe>
        文件路径: C:\WINDOWS\system32\tstm.exe [分析中]

        [U4OCNBOUOQ] [已启用]          <C:\Program Files\Windows NT\U4OCNBOUOQ.EXE 9G7W6>


==============================================================
        驱动程序
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

        [1KAOQD99LG6Y] [已启用]        <\??\C:\WINDOWS\SXMCO.lnk>
        文件路径:  [残留信息]

        [5UB8GV6TG] [已启用]           <\??\C:\WINDOWS\Z638C1N.lnk>
        文件路径:  [残留信息]

        [9DEBHF1N9M] [已启用]          <\??\C:\WINDOWS\08THMZ6L87K.lnk>
        文件路径:  [残留信息]

        [B6I36NVP216W] [已启用]        <\??\C:\WINDOWS\UXSK6.lnk>
        文件路径:  [残留信息]

        [G9Z1RWPYG] [已启用]           <\??\C:\WINDOWS\E4W2GBW.lnk>
        文件路径:  [残留信息]

        [I0GQ0A] [已启用]              <\??\C:\WINDOWS\4ME95A3.lnk>
        文件路径:  [残留信息]

        [IFK5VUK] [已启用]             <\??\C:\WINDOWS\ARUR2.lnk>
        文件路径:  [残留信息]

        [lyguz] [已启用]               <system32\drivers\tdxz.sys>
        文件路径: C:\WINDOWS\system32\drivers\tdxz.sys [未知]

        [OOQV745MAZXW] [已启用]        <\??\C:\WINDOWS\ECKHM.lnk>
        文件路径:  [残留信息]

        [QPGSOE] [已启用]              <\??\C:\WINDOWS\GBVK2DY.lnk>
        文件路径:  [残留信息]

        [R3BZA5V] [已启用]             <\??\C:\WINDOWS\HRQRPANP.lnk>
        文件路径:  [残留信息]

        [wmpobj] [已启用]              <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\obj\wmpobj.sys>
        文件路径: C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\obj\wmpobj.sys [分析中]

        [Y4FFG0] [已启用]              <\??\C:\WINDOWS\SCH3G5HUI5K8.lnk>
        文件路径:  [残留信息]


==============================================================
        BHO
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

        [ThunderAtOnce Class]
        {01443AEC-0FD1-40fd-9C87-E93D1494C233}  <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll>

        [CAdLogic Object]
        {11F09AFD-75AD-4E51-AB43-E09E9351CE16}  <C:\Program Files\Common Files\PushWare\cpush.dll>
        文件路径: C:\Program Files\Common Files\PushWare\cpush.dll [病毒程序]

        [SunsetSurfer Class]
        {AAB6C1A0-F3A4-4DAC-A922-F82E601E73A8}  <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\AFT8Nq0EDe.dll>
        文件路径: C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\AFT8Nq0EDe.dll [分析中]


==============================================================
        当前进程
==============================================================

名称:     agl.exe  [已启用]
文件路径: C:\WINDOWS\system32\agl.exe  [分析中]
模块文件: C:\WINDOWS\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCRT.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Apphelp.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rsaenh.dll                (Microsoft Corporation)

名称:     foxwei.exe  [已启用]
文件路径: C:\WINDOWS\system32\foxwei.exe  [分析中]
模块文件: C:\WINDOWS\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCRT.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHELL32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comctl32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Apphelp.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll              (Microsoft Corporation)

名称:     lasas.exe  [已启用]
文件路径: C:\WINDOWS\system32\lasas.exe  [病毒程序]
模块文件: C:\WINDOWS\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCRT.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Apphelp.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rsaenh.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\uxtheme.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mlang.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\shell32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comctl32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wsock32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RASAPI32.DLL              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasman.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\NETAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\TAPI32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rtutils.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINMM.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msv1_0.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\sensapi.dll               (Microsoft Corporation)

名称:     scvst.exe  [已启用]
文件路径: C:\WINDOWS\system32\scvst.exe  [分析中]
模块文件: C:\WINDOWS\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCRT.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Apphelp.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\uxtheme.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mlang.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\shell32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comctl32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wsock32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RASAPI32.DLL              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasman.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\NETAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\TAPI32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rtutils.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINMM.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\sensapi.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rsaenh.dll                (Microsoft Corporation)

名称:     svch0st.exe  [已启用]
文件路径: C:\WINDOWS\system32\svch0st.exe  [分析中]
模块文件: C:\WINDOWS\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCRT.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Apphelp.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll              (Microsoft Corporation)

名称:     svost.exe  [已启用]
文件路径: C:\WINDOWS\system32\svost.exe  [分析中]
模块文件: C:\WINDOWS\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCRT.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Apphelp.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll              (Microsoft Corporation)

名称:     tstm.exe  [已启用]
文件路径: C:\WINDOWS\system32\tstm.exe  [分析中]
模块文件: C:\WINDOWS\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCRT.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Apphelp.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rsaenh.dll                (Microsoft Corporation)


==============================================================
        ActiveX控件
==============================================================

该项来源: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats

        [ThunderAtOnce Class]
        <{01443AEC-0FD1-40FD-9C87-E93D1494C233}>        <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll>

        [CAdLogic Object]
        <{11F09AFD-75AD-4E51-AB43-E09E9351CE16}>        <C:\Program Files\Common Files\PushWare\cpush.dll>
        文件路径: C:\Program Files\Common Files\PushWare\cpush.dll [病毒程序]

        [SunsetSurfer Class]
        <{AAB6C1A0-F3A4-4DAC-A922-F82E601E73A8}>        <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\AFT8Nq0EDe.dll>
        文件路径: C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\AFT8Nq0EDe.dll [分析中]


==============================================================
        其他安全区域
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

        [显示摇曳 CPL 扩展]         <deskpan.dll>